13 matches found
CVE-2022-44444
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services...
MAL-2024-8810 Malicious code in wif-bitcoin (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c7e0c4c13dfffd62d73e2bfdddc8c8ac3bc967eb7a87935ec05c506fc618ad2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Authentication flaw
An authentication bypass vulnerability exists in Windows Communication Foundation WCF and Windows Identity Foundation WIF, allowing signing of SAML tokens with arbitrary symmetric keys, aka 'WCF/WIF SAML Token Authentication Bypass Vulnerability'...
CVE-2019-1006
CVE-2019-1006 corresponds to an authentication bypass vulnerability in Windows Communication Foundation (WCF) and Windows Identity Foundation (WIF) that allows signing SAML tokens with arbitrary symmetric keys. The connected Nessus entries reiterate this issue as part of Microsoft SharePoint serv...
Microsoft .NET Framework Multiple Vulnerabilities (KB4507419)
This host is missing a critical security update according to Microsoft KB4507419 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...
Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1 and Server 2012 R2 (KB4507413)
Security Only Update for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows 8.1 and Server 2012 R2 KB4507413 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework...
WCF/WIF SAML Token Authentication Bypass Vulnerability
An authentication bypass vulnerability exists in Windows Communication Foundation WCF and Windows Identity Foundation WIF, allowing signing of SAML tokens with arbitrary symmetric keys. This vulnerability allows an attacker to impersonate another user, which can lead to elevation of privileges. T...
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB4507421)
Security and Quality Rollup for .NET Framework 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB4507421 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.5.2 Microsoft .NET Framework 4.6 Microsoft .NET Framework 4.6.1 Microsoft .NET Framework 4.6.2...
July 9, 2019 — KB4506987 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1703
July 9, 2019 — KB4506987 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1703 Applies to: Microsoft .NET Framework 4.8 Summary A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file. An Authentication Bypass...
July 9, 2019 — KB4507419 Cumulative Update for .NET Framework 3.5, 4.7.2, 4.8 for Windows 10, version 1809 and Windows Server 2019
July 9, 2019 — KB4507419 Cumulative Update for .NET Framework 3.5, 4.7.2, 4.8 for Windows 10, version 1809 and Windows Server 2019 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.7.2 and 4.8 Summary A remote code execution vulnerability exists in .NET software if the software...
July 9, 2019 — KB4506988 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1709
July 9, 2019 — KB4506988 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1709 Applies to: Microsoft .NET Framework 4.8 Summary A remote code execution vulnerability exists in .NET software if the software fails to check the source markup of a file. An Authentication Bypass...
July 9, 2019 — KB4506986 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607
July 9, 2019 — KB4506986 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 Applies to: Microsoft .NET Framework 4.8 Summary A remote code execution vulnerability exists in .NET software if the software fails to check the source markup of a file. An Authentication Bypass...
Microsoft Windows WCF/WIF SAML Token CVE-2019-1006 Authentication Bypass Vulnerability
Description Microsoft Windows is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication mechanism and gain unauthorized access. This may lead to further attacks. Technologies Affected Microsoft .NET Framework 2.0 SP2 Microsoft .NET Framewo...